General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! How to...(VPN globalprotect)

Hello guys,

I'm trying to do something and i'm not really sure if it's possible. Let's get into...

I have an url that is for example: "www.myweb.com". Our partner is hosting that web and with his firewall is just allowing us the access through our IP

...

IPsec VPN with AH generates core files

Hi team,

I have two VM-50 v9.01, one in SiteA and another in SiteB. I set up an IPsec tunnel between them with: IKE-v1 : phase1 (aggressive mode) and phase2 (quick mode) with ESP. it works fine and I'am able to ping from a vlan in SiteA to another

...

Resolved! Palo Alto Bandwidth limiting bandwidth for certain subnets?

i have a PA-220 , can i limit bandwidth for certain subnets , for example limit a guest subnet for 10 mbps while let other subnet take 20 mbps? if so how do i do that?

Resolved! cfg export + master key hash

Dear Community,

I have found this side note in an article regarding the master key on the firewall.

"Without the Master Key, when a configuration is exported from a firewall, the password is hashed and can be copied."

Basically its the exact answer o

...

Unable to access the GUI of WF 500

Hi Team

In WF 500, we are unable to access via GUI but we have access via CLI (Putty).

WF 500 os version is 8.0.6. Please refer the attached error snapshot.

Kindly help us to resolve the issue.

Thanks & Regards
Mohammed Ashik

Resolved! Intel MDS Attack

Can anyone help to provide more information if below CVE are impacted in Palo Alto product line?

Intel Microarchitectural Data Sampling Vulnerabilities (Fallout, RIDL, Zombieload) (CVE-2018-12126 , CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)

Collect syslog information

Hi,

We are going to add a new syslog server in PA config. So we would like to do a bit audit about PA supporting syslog sessions.

What si the best way to know:

-Volume of traffic per day for syslog

-Top10 destination syslogs

-.....

thanks.

Overlap-Zone difference Vsys

HI Expert ,

I would like to know that it can be possible about overlap zone name but difference Vsys such as I would to defind name Zone "Trust" on vsys1 and would to zone name "Trust" on vsys2 as well

Please suggest to me

Thank you

Resolved! Alert When Accessing Application

Good morning!

I'm trying to figure out if it's possible to throw an "alert" log entry when a specific application is accessed. I know it can be done with categories, but I'd like to do the same with specific applications.

I can always filter my Traff

...

Resolved! cloud based proxy via IPSEC vpn and the way DPD is implemented on palo alto

Hello.

so I've got a curious little problem and wanted to get some opinions before possibly creating a feature request at PA.

we have a customer using a palo alto as his main firewall.
and a certain cloud based proxy as their proxy.

connecting to this p

...

Bulk submission support using Web GUI? and CLI access to minemeld hosted in Autofocus?

I cannot see a way to do bulk submissions from the Web GUI that I know of so are there plans on having that capability in a future Minemeld release?

how to get CLI access to Minemeld hosted in Autofocus?

Do you need Windows Server 2019 support for User-ID?

If you think you will need Windows Server 2019 support for User-ID, ask your PA rep to vote for feature request ID# 11012!

We just upgraded all of our domain controllers organization-wide to Server 2019 only to find out that User-ID does not work wit

...

Best Practice: Allowing a known application together with a custom service.

Let's say we have 2 zones seperated by our PA firewall, Zone A and Zone B. Traffic between Zone A and Zone B is only allowed for some applications/services from dedicated devices in Zone A to dedicated devices in Zone B.

We have a custom Service whic

...

Import LDAP Groups

All,

I am trying to import my LDAP groups, but don't want all of them. I have too many groups to put them in the Include list. I also have a large number of local.admin and Folder Access security groups. SInce I can't filter by OU, how can I filte

...

Zone protection - Show hops between source & dst.

Hello,

I want to see the hops between the source and destination when I do tracert from my PC to an IP.

The tracert is shown as completed.

I followed the following kb but didn't work: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA

...

Discussions